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(54) Title: IMPROVEMENTS IN OR RELATING TO CREDIT CARDS 

(57) Abstract 

To improve security and prevent fraudulent use of a 
credit card (40), there is provided a verification device (10) 
which is separate from the credit card and bears different 
data, e.g. on a magnetic strip. At the time of a transaction 
the data is read (32) to verify that it relates to the credit 
card in use before the transaction is allowed to proceed. 
The data is preferably read by a separate reader (24) so that 
it never needs to leave the hands of the owner, although 
a common reader could be used. A PIN number may 
also be entered (24) at the time of the transaction for 
verification. Preferably the different data comprises (a) 
data enabling an initial verification check at the reader, 
(b) data which is essentially unique to a particular card 
for a second verification at a central computer, and (c) 
variable data for verification at the central computer, and 
which is thereafter altered and rewritten both at the central 
computer and on the verification device. 





50" 



-54 



22 



D 



poo fl 
oooc 




7 



60 



58- 



-24 



-56 



52 



aucrwv.irv *wn (votkibai I > 



FOR THE PURPOSES OF INFORMATION ONLY 
Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCT. 



AL 


Albania 


ES 


Spam 


LS 


Lesotho 


SI 


Slovenia 


AM 


Armenia 


FI 


Finland 


LT 


Lithuania 


SK 


Slovakia 


AT 


Austria 


FR 


France 


LU 


Luxembourg 


SN 


Senega] 


AU 


Australia 


GA 


Gabon 


LV 


Latvia 


sz 


Swaziland 


AZ 


Azerbaijan 


GB 


United Kingdom 


MC 


Monaco 


TD 


Chad 


BA 


Bosnia and Herzegovina 


GE 


Georgia 


MD 


Republic of Moldova 


TG 


Togo 


BB 


Barbados 


GH 


Ghana 


MG 


Madagascar 


TJ 


Tajikistan 


BE 


Belgium 


GN 


Guinea 


MK 


The former Yugoslav 


TM 


Turkmenistan 


BF 


Burkina Faso 


GR 


. Greece 




Republic of Macedonia 


TR 


Turkey 


BG 


Bulgaria 


HU 


Hungary 


ML 


Mali 


TT 


Trinidad and Tobago 


BJ 


Benin 


IE 


Ireland 


MN 


Mongolia 


UA 


Ukraine 


BR 


Brazil 


IL 


Israel 


MR 


Mauritania 


UG 


Uganda 


BY 


Belarus 


IS 


Iceland 


MW 


Malawi 


US 


United States of America 


CA 


Canada 


IT 


Italy 


MX 


Mexico 


uz 


Uzbekistan 


CF 


Central African Republic 


JP 


Japan 


NE 


Niger 


VN 


Viet Nam 


CG 


Congo 


KE 


Kenya 


NL 


Netherlands 


YU 


Yugoslavia 


CH 


Switzerland 


KG 


Kyrgyzstan 


NO 


Norway 


ZVV 


Zimbabwe 


CI 


C6te d'lvoire 


KP 


Democratic People's 


NZ 


New Zealand 






CM 


Cameroon 




Republic of Korea 


PL 


Poland 






CN 


China 


KR 


Republic of Korea 


PT 


Portugal 






cu 


Cuba 


KZ 


Kazakstan 


RO 


Romania 






cz 


Czech Republic 


LC 


Saint Lucia 


RU 


Russian Federation 






DE 


Germany 


LI 


Liechtenstein 


SD 


Sudan 






DK 


Denmark 


MC 


Sri Lanka 


SE 


Sweden 






EE 


Estonia 


LR 


Liberia 


SG 


Singapore 







^SDOCID: <WO 98275 19A1_I_> 



WO 98A27519 



PCT/GB97/03448 



IMPROVEMENTS IN OR RELATING TO CREDIT CARDS. 

The present invention relates to credit cards and in 
particular to a means and method for improving security 
5 with regard to credit cards and to preventing fraudulent 
use of stolen or bogus credit cards . 

The term "credit card" is intended to apply to any 
encoded card which is used to obtain money from cash 
10 dispensers or goods or services from suppliers and 
retailers . 

Credit cards commonly have a code magnetically encoded 
thereon. The code is read by a cash dispensing machine 

15 for example, the code also being supplemented by a so- 
called PIN (personal identification number) number which 
is also entered in the machine to obtain cash. In theory, 
only the person to whom the card is issued knows the PIN 
number, and therefore, only that person can obtain cash 

20 from the machine. However, thieves steal cards and have 
ways of discovering the PIN numbers of stolen cards such 
that stealing money is relatively easy. 

Furthermore, a PIN number, being of necessity relatively 
25 short so it can be remembered, does not uniquely identify 
any single person having a credit card. 

Stolen or bogus credit cards are also used to obtain 
goods and services from suppliers and retailers. The only 
30 means of checking whether the person is entitled to use 
the card is to attempt to correlate the signature on the 
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transaction document with that on the credit card. 
However, it is almost impossible to verify if a signature 
is genuine or not as many criminals are skilled in 
forging signatures . 

In addition to stolen cards, it is now possible for 
criminals to make multiple copies of stolen cards or to 
manufacture fake or bogus cards which are sufficiently 
convincing to defraud retailers. 

Levels of credit card related fraud will continue to grow 
because it often not possible to identify stolen cards 
until it is too late and it is also very difficult or 
impossible to identify the people who use the cards 
fraudulently. Currently, in the United Kingdom some 5000 
cards are reported as stolen every day. 

It is an object of the present invention to reduce the 
amount of credit card related fraud. 

In a first aspect, the present invention provides credit 
card verification apparatus comprising a reader for 
reading first data encoded on a credit card, means for 
reading second data encoded on a credit card verification 
device physically separate from the credit card, wherein 
for any individual credit card and its associated 
verification device the first data is unique thereto and 
the second data is essentially unique thereto and 
different from said first data, and verification means 
for verifying that the first and second data relate to 
the same credit card. 
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As used herein, "essentially unique" means that the 
number of variations in the second data is sufficiently 
large that there is an insignificant chance, for example 
less than 10~ 6 , and preferably less than 10* 8 , of two 

5 credit cards being associated with the same second data, 
even if the second data is randomly selected. Use of the 
uniqueness of the first data to generate the second data 
is possible, but if there is an algorithm connecting the 
first and second data, it should be selected, in known 

10 manner, so that the one is not readily derivable from the 
other and vice versa. However, no algorithm is 

necessary, it merely be required that the first data is. 
uniquely, and the * second data essentially uniquely, 
associated with their particular credit card account in a 

15 databank. 

Where a PIN number is allocated to the credit card in 
question the apparatus may also comprise PIN number entry 
means for entering a PIN number, and the verification 
20 means may additionally determine that the PIN number so 
entered is that allocated to the credit card. 

In a second aspect the present invention provides a 
method of preventing credit card fraud comprising 

25 supplying with a credit card which contains information 
including first encoded data, a credit card verification 
device which is physically separate from the credit card 
and contains information including second encoded data, 
said first data being unique to an individual credit 

30 card, and said second data being essentially unique to an 
individual credit card and different from said first 
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data, receiving first data from a credit card and second 
data from a verification device and acting upon said 
first data only when it has been determined that the 
first and second data relate to the same card. 

5 

The information on the credit card may include an 
indication that the second data, and, if appropriate, a 
PIN number, is required. 

10 Again, where a PIN number has also been allocated to an 
individual credit card, the method may additionally 
include receiving a PIN number and acting upon said first 
data only when it has been determined that the PIN number 
is that allocated to the credit card. 

15 

In this specification the term "specified credit card" or 
"individual credit card" is meant to refer to a 
particular credit card or set of cards all relating to 
the same credit card account, issued to an individual 
20 user or group of individual users for their use only, use 
by others being defined herein as fraudulent use. 

The verification device has its own encoded information 
(second data) which bears an essentially unique relation 
25 to its associated credit card, to allow use of the latter 
in the manner described hereinbelow. Optionally, it 
includes additional information relating to the person 
issued with the credit card, for further verification 
purposes by a third party. 

30 
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Because it does not need to be remembered, the second 
data can be long or have a complicated format, unlxke a 
PIN number. Both of these measures increase validity of 
verification and security. 

in a preferred embodiment, verification is effected in at 
least two stages, and the information on the verification 
device comprises the second data and third data. For 
example, in a first verification stage, the first data 
and third data may be checked at the device reader 
itself, and only if the outcome is positive are the first 
data and the second data forwarded to a central computer 
for a second verification stage. 

in such an arrangement, the third data may have a 
relatively simple relation to the first data, for example 
it may be the same as the first data, or be derivable 
therefrom by a relatively simple algorithm. The third 
data is preferably unique or essentially unique to an 
individual credit card, but need not be so. 
Nevertheless, the second data is unique, or essentially 
unique to the credit card, and so provides a greater 
degree of security. 

Even more preferably, where the information recorded on 
the verification device is re-writable, the device may 
include variable fourth data. In use, the fourth data is 
also sent to the central computer for verification that 
it relates to the credit card, and once verification has 
. taken place, the fourth data is altered according to any 
known algorithm, including the selection of a random 
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number, recorded at. the central computer, and re-written- 
to replace the existing fourth data on the verification 

device . 

5 In this manner, even if the information on a verification 
device and on a credit card is copied by a fraudster, 
provided the true owner uses the card before the 
fraudster, the latter will be prohibited from using the 
card, because the fourth information will have been 

10 altered in the meantime. It is true that should the 
fraudster manage to use the card before the true owner, 
then the latter will be unable to use the card, but this 
may be considered to be advantageous. Since the true 
owner may well be unaware that the information on the 

15 card and device have been copied ((and, if appropriate, 
the PIN number known) , so that cash is being drained from 
the related account, the inability to use the card will 
(or should) provide an alert to the owner, or the credit 
card company when the owner complains or the system 

20 detects an apparently fraudulent attempt to use the card, 
that fraudulent use of the card may have taken place, 
thus enabling checks to be made and the extent of the 
fraud to be reduced. 

25 Clearly, data similar to the third and fourth data could 
also be provided on the credit card itself. In 
particular, variable fourth data on the credit card could 
also prove useful in reducing the extent of fraud in 
transactions using credit cards without the associated 

30 verification device. 
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Preferably none of the second, third and fourth data is 
identical to a PIN number associated with the credit 
card or identical to data provided by the card xwelf. 
although it would be possible for the second data to 
equate thereto in a relatively low security arrangement. 

The use of the variable fourth variable data itself 
provides an enhanced degree of security. Thus, in a 
third aspect the invention provides credit card 

9 verification apparatus comprising a reader for reading 
first data encoded on a credit card, means for reading 
and writing variable data encoded on a credit card 
verification device physically separate from the credxt 
card said variable data being different from said first 

5 data, verification means including a data store for 
verifying that the first and variable data as read relate 
to the same credit card, and upon said verification bexng 
positive, altering said variable data, storing said 
altered variable data in said data store, and replacing 

20 said variable data with said altered variable data on 
said verification device. 

Correspondingly, in a fourth aspect the invention 
provides a method of preventing credit card fraud 

25 comprising supplying with a credit card which contains 
information including first encoded data, a credit card 
verification device which is physically separate from the 
credit card and contains information including encoded 
variable data different from said first data, receiving 

30 first data from a credit card and said variable data from 
a verification device and acting upon said first data 
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only when it has been determined that the first and 
variable data relate to the same card, said acting upon 
including the step of subsequently altering said variable 
data on the verification device and storing the altered 
5 variable data for use when repeating the said method. 

It will be clear that the invention in its third and 
fourth aspects can be combined with the invention in its 
first and second aspects respectively. Thus, for 

10 example, the verification device may also contain the 
second and/or third data for use as described herein in 
relation to the invention in its first and second 
aspects , 

15 The information on the verification device may be encoded 
in any known suitable form such as by means of a 
magnetically encoded strip, optical encoding (preferably 
invisible to the human eye) , an rf transponder, a 
microchip or any other form of readable information 

20 retaining means. 

Clearly, it is advisable for the owner to keep the credit 
card and the verification device separate, just as it is 
recommended that any document recording a PIN number 

25 should be kept separately (and preferably not indicating 
that it contains information regarding the PIN number) . 
While the verification device could be in the form of 
another card, there then exists a strong temptation to 
place them both in the same location, for example in the 

30 same wallet or purse, particularly if it is of the same 
size and shape as the credit card. 

8 
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Preferably, therefore, the verification Cev.ce is gx« 
an different shape and/or size reducing this te.ptat.on. 
In a particularly preferred for., the verification device 
5 is in the form of a Key, having an apertured handle 
portion enabling it to be attached to a key-ring. 

Thus in a fifth aspect, the invention provides a credit 
card' verification device having a flat or three- 

9l cViaDe of a key, and bearing thereon machine 
[0 dimensional shape ox a , 

readable information. 

The key need only be as large as is necessary to enable 
information thereon to be read by an appropriate reader. 
,5 The key may be of metal, providing this does not 
interfere with the reading of the information thereon 

(this will depend on how the information is recorded) . 
but could be of an alternative material such as plastics 

or card Preferably, the key shape is three-dimensional 
20 - for example with significant thickness, and preferably 

a non-unifortn thickness, such as a cylindrical shank and 

flat apertured handle. 

UK Patent Application No. 2 181 582 (Blackwell) discloses 
25 an electronic device, such as in the for. of a watch, 
which is provided with a secure store for personal 
identity information, such information being available 
for use either on a display (e.g. of the watch) for 
transmission to equipment to which access is sought. It 
30 is mentioned that this device could be used to display or 
transmit coded information for use in conjunction with 
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information on a credit card and a PIN number to provide 
additional security. It is believed that the PIN number 
referred to here is that (a personal number) used for 
gaining access to information held in the device (this 
5 information could be for example a conventional PIN 
number associated with a credit card) rather than the 
conventional PIN number itself. In such a case this 
device merely constitutes a new way of retrieving a 
conventional PIN number when a credit card is used, and 

10 as noted above, PIN numbers are not generally unique to 
individual cards. This method possibly provides greater 
security insofar as access to the PIN number itself 
requires input of a personal number into the device, but 
is not considered to provide the degree of security 

15 afforded by the present invention. 

Furthermore, the device is an active electronic device 
requiring a power source such as a battery, means for 
entering and storing the personal identity information, 
20 and means for retrieving and transmitting or displaying 
such information, all within the device itself. Thus the 
device is relatively complicated, and becomes useless if 
the battery fails. 

25 In a preferred form of the present invention, the 
information is held by passive readable means for active 
reading by an external reader - thus, as later described 
in relation to a preferred embodiment, it would 
sufficient simply to write information on a magnetic 

30 strip at the time of producing the verification device, 
and to read the second and/or other data therefrom by an 

10 



JSDOCID: <WO_9827519A1_l_> 



WO 98/27519 



PCT/GB97/03448 



10 



15 



eternal reader at . the point of use. There i. no PIN 
number necessary for accessing the information on the 
verification device, rather such information is obtained 
and is correlated with information from the credit card 
and/or associated PIN number for verification purposes 
any Known coding method of the various items of 
information being employed, preferably such as provides a 
high degree of security, as mentioned above and later. 

The specified credit card and its associated verification 
device are unique to one another. However, where a card 
issuer issues more than one credit card of one account 
holder to a group of people such as, for example, other 
members of the account holder's family such as the wife 
or husband, each verification device associated with an 
individual card cou!d be identical or different. Where 
there is variable fourth information on the verification 
device as mentioned previously, then it will be 
necessary for each verification device to differ, so as 
to be identifiable and capable of being associated with 
its own variable information, to prevent the use of a 
card by one of the said group prohibiting use by other 
member of the group. However, even in these 

circumstances the encoded information on the credit card 
is usually the same as it frequently relates to an 
individual account holder's details. In these 
circumstances, for example, there would be issued one 
verification device for each issued individual credit 
card. 
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In use the specified credit card would be issued to a 
person or group of persons by the card issuer together 
with a separate verification device by any known means. 
Usual security precautions may apply such that the 
5 account is only activated when the recipient of the cards 
acknowledges safe receipt for example. The credit card 
and the verification device would be kept by the person 
separate from each other, the verification device perhaps 
being kept on a key-ring with other keys for example. 

10 

To effect a transaction at a cash dispenser for example 
by the present invention, the credit card would be 
inserted in the machine in known manner and the user's 
PIN number entered, the person then also being required 

15 to insert his verification device in the machine. A 
database to which the machine is connected and which 
holds details of the person's account then verifies that 
the correct corresponding details between the information 
encoded on the credit card, PIN number and information 

20 encoded on the verification device meet predetermined 
criteria before issuing cash to the person. Thus, if the 
credit card per se is stolen and even if the thief knows 
the person's PIN number it will not be possible for him 
to withdraw cash without the verification device. 

25 

Similarly, when a person is securing goods or services at 
a shop for example, it will be necessary for the person 
to provide his verification device. In addition to the 
credit card being "swiped" or inserted into a means of 
30 reading the encoded information thereon, the verification 
device will also be swiped or otherwise read. In the 

12 
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absence o £ the verification device, the transact.cn «11 
not occur in case the credit card has been stolen. Thus, 
in addition to the usual signature fro. the person 

the retailer will also 
receiving the goods or services, tne 

h ave the assurance of the credit card being 

th. verification device.- the transaction not proceeding 

^ t->\<=> credit card and 
unless the information on the 

verification device meet the predefined criteria held xn 
the database. Preferably, the verification device will 
always remain with the user and will not be taken by a 
retailer together with the credit card into another room 
for example to be swiped. Thus, there should always be a 
m eans of reading the verification device at a convenient 
iocation such that the verification device always remaxns 
within sight of the user. 

It will be apparent to those skilled in the computer and 
information technology art that many different forms of 

™ and software means may be provided to 
hardware means ana soitwaic 

_ , a-rt-icle of the present invention, 

support the method and article oi r 

For example, the order in which the credit card PIN 
number and verification device are entered into the 
information reading means may be any that correspond to 
or are dictated by the particular software. 

Similarly, software may be produced whereby the credit 
card and verification device be entered sequentially xn 
the same receiver in the information reading means. In 
t his embodiment, existing hardware may be retained and 
o only the software changed. 
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With the method of the present invention it may not be 
necessary for there to be a PIN number, which can easily 
be. forgotten by a user, the credit card and verification 
device together being sufficient. However. in the 
5 interests of security, it is preferable that the present 
invention be used in conjunction with a conventional PIN 
number . 

In a particularly preferred form, verification is done in 

10 two stages. First verification means, for example in the 
card reader itself, performs a check on information 
provided by the card or verification device or both (for 
example, a simple parity check to verify that the coded 
information is of acceptable form and valid per se, but 

15 preferably, as mentioned above, a check on the third data 
to establish that it relates to the credit card), and 
second verification means, for example in a host computer 
receiving output from the reader, performs a further 
check on both sets of information (preferably, as 

20 mentioned above, verification that the second and 
variable fourth data relate to the credit card and the 
present state of the verification device respectively) . 
In known manner, failure to achieve verification can be 
arranged to cause non- return of the credit card and/or 

25 verification device. It will be clear that this mode of 
operation can be practised with the additional input of a 
PIN number. 

The verification device could also contain encoded 
30 information relating for example to the appearance and 
gender of the person using it, or to a car registration 

14 
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or NHS number, enabling the retailer who suspects fraud 
to verify visually or by interrogation that the person 
using it corresponds to such information. 

5 in order that the present invention may be more fully 
understood, an example of the present invention will now 
be described by way of illustration only with reference 
to the accompanying drawings, of which: 

10 Figure l shows a schematic view of a verification device 
having a key- shape according to the present invention, 
for use in the verification apparatus and method of the 
invention; 

15 Figure 2 shows a schematic view of a cash dispenser for 
use with the present invention; 

Figure 3 shows a schematic of a credit card; and, 

20 Figure 4 which shows a block diagram illustrating the 
method of the present invention. 

Referring now to the drawings and where the same features 
are denoted by common reference numerals . 
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Figure 1 shows a verification device 10 according to the 
present invention, henceforth referred to briefly as a 
"cardkey". The cardkey is in the shape of a key and made 
of a stiff, durable plastics material and intended to be 
kept by a user on a key-ring (not shown) by the head 12. 
The cardkey 10 has information encoded on a magnetic 
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strip 14 affixed to the shank 16 of the cardkey. In 
modifications (a) the cardkey is made of metal; (b) the 
card key has a three dimensional key shape; and/or (c) 
the coding is other than magnetic, e.g. optical. 

5 

Figure 2 shows a schematic view in elevation of a cash 
dispensing machine 20. The machine 20 has the usual 
features to be found in such devices including; a display 
screen 22 for imparting instructions and/or information 
10 to the user; a keypad 24 for entering numbers; a slot 2 6 
for receiving a credit card; a keypad 2 8 for answering 
standard questions made by the device 20; a cash 
dispenser slot 30; and, a slot 32 for receiving the 
cardkey 10. 

15 

Figure 3 shows a schematic view of a conventional 
plastics material credit card 40 which has a standard 
rectangular body 42 having the usual embossed information 
relating to the person to whom it is issued, expiry date, 
20 account number and so forth and a magnetic strip 44 
having information encoded thereon. 

Figure 4 shows a block diagram indicating the cardkey 10, 
cash dispenser 20, credit card 40 and a central database 

25 52. The cardkey contains second, third and fourth data as 
described previously, neither of the second and fourth 
data equating to information on the credit card itself. 
The third data can, but need not, correspond to 
information on the credit card for a preliminary check at 

30 the reading stage. 
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The credit card 40 is entered in the slot 26 of the 
machine 20 and the information thereon is read 50 in 
known manner and verified against data held in the 
central data base 52; an invitation is issued to enter 
the cardkey in the slot 32 of the machine 20 and at least 
the third data is read 54 by known means. 

Either in the in the central database 52 or the reader, 
but preferably the latter in cases where the first and 
► third data have a predetermined relation, the third data 
is verified by correlation with the first data. The 
reader then reads the second and fourth data, if it has 
not done so when determining the third data, for 
transmission to the central database and correlation with 
5 stored information relating to the credit card and 
verification device. Meanwhile, the user's PIN number is 
entered on the keypad 24 which again is verified 56 by 
the database 52. Only when all verifications have been 
satisfactorily completed does the database 52 enable 58 
the machine 20 to issue the cash 60 requested by the 
user. At this stage the fourth data is altered, the 
altered data is stored at the central database, and also 
written over the existing fourth data on the cardkey. 
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in an alternative embodiment the slot 32 for the card key 
10 may also be the same as the slot 26 for the credit 
card 40, the cardkey 10 being in a similar physical form 
to the card 40. In this embodiment, the credit card 40, 
PIN number and cardkey 10 are entered sequentially into 
the machine 20 in response to instructions displayed in 
the window 22 of the machine 20. 
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It will be apparent to those skilled in the art that all 
of the hardware means to put the present invention into 
effect are already known in the art. The present 
invention once known to a person skilled in the computer 
5 software art may be put into effect by the writing of 
appropriate enabling software. 
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CLAIMS 

! credit card verification apparatus comprising a 
reader for reading first data encoded on a credit card, 
means for reading second data encoded on a credit card 
verification device physically separate from the credit 
card, wherein for any individual credit card and its 
associated verification device the first data is unique 
thereto and the second data is essentially unique thereto 
and different from said first data, and verification 
means for verifying that the first and second data relate 
to the same credit card. 



10 



25 



2 



Credit card verification apparatus according to 

15 claim 1 and further comprising PIN number entry means for 

entering a PIN number, and verification means for 

establishing that the PIN number is associated with the 
credit card. 

20 3. Apparatus according to claim 1 or claim 2 wherein 
the second data is magnetically or optically encoded. 

4. Apparatus according to any preceding claim wherein 
the first and second reading means are the same means. 



5 Apparatus according to any one of claims 1 to 3 
wherein the first and second reading means are different 



means 
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6. Apparatus according to any preceding claim wherein 
the PIN number entry means is a keyboard for manual 
input . 

57. A method of preventing credit card fraud comprising 
supplying with a credit card which contains information 
including first encoded data, a credit card verification 
device which is physically separate from the credit card 
and contains information including second encoded data, 

10 said first data being unique to an individual credit 
card, and said second data being essentially unique to an 
individual credit card and different from said first 
data, receiving first data from a credit card and second 
data from a verification device and acting upon said 

15 first data only when it has been determined that the 
first and second data relate to the same card. 

8. A method according to claim 7 wherein a PIN number 
is also associated with the credit card, and said acting 

20 upon said first data is conditional upon receipt of said 
PIN number. 

9. A method according to claim 7 or claim 8 wherein the 
information on the credit card is indicative of the fact 

25 that the second data is required. 

10. A method according to any one of claims 7 to 9 
wherein the verification device comprises third data for 
verification by correlation with said first data before 

30 said acting is enabled. 
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U A method according to any one of claims 7 to 10 

serein the verification device comprises fourth data, 

said acting is enabled only when it has been verified 

that the fourth data relates to the said credit card, and 

; wherein said fourth data is subsequently altered, the 

altered fourth data being written on the verification 

device in place of the existing fourth data, and also 

being stored in association with other information 

~r*a*r rard for verification purposes 
identifying the credit cara, 

0 upon a later use of the verification device. 

12 A method according to any one of claims 7 to 11 
wherein the verification device has a two or three 
dimensional shape of a key. 
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13 Credit card verification apparatus comprising a 
reader for reading first data encoded on a credit card, 
means for reading and writing variable data encoded on a 
credit card verification device physically separate from 
the credit card, said variable data being different from 
said first data, verification means including a data 
store for verifying that the first and variable data as 
read relate to the same credit card, and upon said 
verification being positive, altering said variable data, 
storing said altered variable data in said data store, 

variable data with said altered 
and replacing said vanaoie 

variable data on said verification device. 

14 . A method of preventing credit card fraud comprising 
supplying with a credit card which contains information 
including first encoded data, a credit card verification 
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device which is physically separate from the credit card 
and contains information including second encoded 
variable data different from said first data, receiving 
first data from a credit card and variable data from a 

5 verification device and acting upon said first data only 
when it has been determined that the first and variable 
data relate to the same card, said acting upon including 
the step of subsequently altering said variable data on 
the verification device and storing the altered variable 

10 data for use when repeating the said method. 

15 . A credit card device having a flat or three- 
dimensional shape of a key, and bearing thereon machine 
readable information. 
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